AMENDMENT UNDER 37 CF.R. §1.111 ATT Y DOCKET NO.: Q77 144 

U.S. APPLN.NO.: 10/650,667 

AMENDMENTS TO THE CLAIMS 

This listing of claims will replace all prior versions and listings of claims in the 

application: 

LISTING OF CLAIMS: 

1 . (currently amended): A fault tolerant computer comprising: 

a plurality of first and second CPU (Central Processing Unit) modules processing the 
same instruction string while maintaining clock synchronization; 

a plurality of I/O modul e s an I/O module eaeh having a plurality of device controllers 
each executing input/output control processing for a device; and 

a plurality of transaction synchronization controllers, provid e d in e ach of said d e vic e 
controll e rs, that ch e cks if s e qu e nces of I/O transactions issu e d from said plurality of CPU 
modul e s match and, if th e s e qu e nces match, judg e s that an out - of synchronization condition is 
not caus e d. each of which is provided with corresponding one of said device controllers, checks if 
first and second sequences of I/O transactions addressed to said corresponding device controller 
issued from said first and second CPU modules, respectively, match, and determines whether 
out-of-synchronization occurs. 

2. (currently amended): The fault tolerant computer according to claim 1 ^ wherein said 
transaction synchronization controller comprises: 

a timer m e ans for m e a s uring element which measures a predetermined time; and 
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a comparison m e ans for ch e cking if the s e qu e nc e s of I/O transactions, issued from the 

plurality of CPU modul e s, match on a d e vice controll e r basis element which checks if said first 

and second sequences match while waiting for the predetermined time. 

3. (currently amended): The fault tolerant computer according to claim 2 1 wherein said 
transaction synchronization controller further comprises an output controller that outputs said I/O 
transactions to said device controller when said first and second sequences match. 

4. (currently amended): The fault tolerant computer according to claim 3 a wherein, when 
the I/O transactions from the first and second CPU modules match, said output controller outputs 
the matching I/O transactions to said device controller, one at a time. 

5. (currently amended): The fault tolerant computer according to claim 2 A wherein, when 
the first and second sequences do not match within the predetermined time or when the first and 
second sequences of I/O transactions differ, said output controller outputs a failure notification. 

6. (currently amended): The fault tolerant computer according to claim 2, furth e r 
comprising a plurality of storag e m e ans wherein said transaction synchronization controller 
further comprises first and second storage elements in which the I/O transactions issued from 
said plurality of first and second CPU modules are stored. 
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7. (currently amended): The fault tolerant computer according to claim 26^ wherein said 
transaction synchronization controller further comprises selection circuits that which select 
between said plurality of storag e means and said CPU modul es first storage element and said 
first CPU module and which select between said second storage element and said second CPU 
module, as a source from which I/O transactions to be sent to said comparison mems element are 
received. 

8. (currently amended): A transaction synchronization control method for use in a fault 
tolerant computer, said method comprising: 

a first step of sending a plurality of, and the same, I/O transactions from a plurality of 
first and second CPU modules, which process the same instruction string while maintaining 
clock synchronization, to a plurality of device controllers in an I/O module; and 

a s e cond st e p of checking if first and second sequences of th e rec e iv e d I/O transactions 
addressed to said device controller issued from said first and second CPU modules, respectively, 
match and determining whether out-of synchronization occurs, in e ach of a plurality of d e vic e 
controll e rs provid e d in said I/O modul e and, if th e s e qu e nc e s match, judging that an out of 
synchronization condition is not caus e d. 

9. (currently amended): The transaction synchronization control method according to 
claim 8 A wherein said s e cond checking step checks if the said first and second sequences of I/O 
transactions match while waiting for a predetermined time. 
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10. (currently amended): The transaction synchronization control method according to 
claim 9, further comprising a third st e p of outputting the I/O transactions to said device 
controller when the said first and second sequences match. 

1 1 . (currently amended): The transaction synchronization control method according to 
claim 9 4 wherein, for each device controller, said fifst sending step stores the I/O transactions 
issued from said plurality of first and second CPU modules into a plurality o f first and second 
storage mean s elements, respectively and 

wherein said s e cond checking step sends the I/O transactions, stored in said first and 
second storage elements rec e iv e d from th e CPU modul e s , to comparison m e ans element which 
checks if said first and second sequences match for us e in comparing th e I/O transactions , checks 
if the predetermined time has elapsed if th e I/O transactions said first and second sequences do 
not match, and fodges determines that an out-of-synchronization condition is not caused if the 
predetermined time has not yet elapsed. 

12. (currently amended): The transaction synchronization control method according to 
claim 1 1 A wherein, when the received I/O transactions match, the matching I/O transactions are 
output to said device controller, one at a time. 

13. (currently amended): The transaction synchronization control method according to 
claim 9, further comprising th e st e p of outputting a failure notification when the said first and 
second sequences do not match within the predetermined time. 
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14. (currently amended): The transaction synchronization control method according to 
claim 1 1 , further comprising th e step of selecting between said plurality of storage m e ans 
element and said first CPU modul e s module and selecting between said second storage element 
and said second CPU model as a source when a new I/O transaction is sent to said comparison 
means element . 

15. (currently amended): The transaction synchronization control method according to 
claim \4 X wherein, when the said first and second storage m e ans elements do not contain 
effective data, said st e p of selecting step b e tw ee n said plurality of storage m e ans and said CPU 
modul e s switches the source to the first and second CPU modules , respectively . 

16. (currently amended): A transaction synchronization control program product for use in a 
fault tol e rant comput e r in which th e same instruction string is proc e ss e d by a plurality of CPU 
modul e s whil e maintaining clock synchronization, said program product A computer program 
product having a computer readable medium with computer readable program code stored 
thereon, said computer readable code comprisin g the steps of : 

a first step of sending a plurality of, and the same, I/O transactions from th e plurality of 
first and second CPU modules to a plurality of device controller in an I/O module; and 

a s e cond step of checking if first and second sequences of th e r e ceiv e d I/O transactions 
addressed to said device controller issued from said first and second CPU modules, respectively, 
match and determining whether out-of-synchronization occurs, in e ach of a plurality of d e vic e 
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controll e rs provid e d in said I/O modulo and, if th e sequences match, judging that an out of 
synchronization condition is not caused . 

1 7. (currently amended) : The transaction synchronization control program product 
according to claim 1 6 A wherein said s e cond checking step checks if the said first and second 
sequences of I/O transactions match while waiting for a predetermined time. 

1 8 . (currently amended) : The transaction synchronization control computer program 
product according to claim 17, further comprising a third step of outputting the I/O transactions 
to said device controller when the said first and second sequences match. 

1 9. (currently amended): The transaction synchronization control computer p rogram 
product according to claim 16, further comprising th e st e p of outputting a failure notification 
when the said first and second sequences do not match within the predetermined time or when 
the first and second sequences of I/O transactions differ. 

20. (currently amended): The transaction synchronization control computer p rogram 
product according to claim 17 a 

wherein, for each device controller, said fifst sending step comprises th e st e p of storing 
the I/O transactions, issued from said plurality of first and second CPU modules, into a plurality 
of first and second storage means elements, respectively and 
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wherein said seeeftd checking step comprises th e st e ps of sending the I/O transactions 

r e c e iv e d from th e CPU modul e s stored in said first and second storage element to comparison 

m e ans element which checks if said first and second sequences match and comparing the I/O 

transactions; checking if the predetermined time has elapsed if th e I/O transactions said first and 

second sequences do not match; and judging determining that an out-of-synchronization 

condition is not caused when the predetermined time has not yet elapsed. 



8 



